Specific Folder & Trusted User

[mlajoie]

Hi.  We would like to identify a specific folder, on the computer,  that our application administrators could then copy to and install from.  I know that can be done through the policy identifying the specific folder.  We'd also like to lock down that folder to only allow a specific AD to launch the executable from inside that folder.  

We don't want this admin group to have universal rights to install applications from anywhere on the computer -- just that specific folder.

Please advise if that is possible and, if so, how.

Thanks in advance.

[Former Member]

Hello,

Thank you for your post.

You can create a Trusted directory as mentioned in the below link to run any application from a particular folder.
https://docs.mcafee.com/bundle/application-control-8.1.0-windows-product-guide-epolicy-orchestrator/...

You can also add a Trusted user to run any application by the user you want.
https://docs.mcafee.com/bundle/application-control-8.1.0-windows-product-guide-epolicy-orchestrator/...

I hope this helps. Let us know if you have any queries.

[mlajoie]

What about allowing the trusted user to only run an application from that one trusted directory? this would be an admin who remotes to a machine to install a piece of software so it isn't his everyday comptuer.

[BenEllis · Accepted solution]

The only way you could accomplish that is through security policies for that folder. You would have to trust the folder in solidcore policy and then control who has access to that folder via ad